Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-3388 - Vulnerability Database
Moodle

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-3388

Medium
Reference: CVE-2012-3388
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-3388
Title: Moodle Permissions Privileges and Access Controls Vulnerability
Overview:

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.